This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
File: SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft (raw, json)
Hash identifier: Y1yO2f0kajVtYYNYlI7EE2BfhrY02W8+GO63jR1owU0=
Subject key identifier: 1D:5C:41:41:7C:60:C1:53:05:00:C0:A2:A0:59:4A:F4:AF:6A:61:F3
Authority key identifier: 4B:2A:86:65:95:45:F9:25:66:35:42:47:A4:F0:8F:3C:E5:BE:6C:0D
Certificate issuer: /CN=A9182EC4/serialNumber=4B2A86659545F92566354247A4F08F3CE5BE6C0D
Certificate serial: 3391
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
Manifest number: 3391
Signing time: Mon 22 Dec 2025 15:13:06 +0000
Manifest this update: Mon 22 Dec 2025 15:13:05 +0000
Manifest next update: Mon 29 Dec 2025 15:13:05 +0000
Files and hashes: 1: SyqGZZVF-SVmNUJHpPCPPOW-bA0.crl (hash: eT74B/874eERvOdNy51NgzzsmjS3GMmHFqCe5X+4qgc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.crl
rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 15:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13201 (0x3391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182EC4, serialNumber=4B2A86659545F92566354247A4F08F3CE5BE6C0D
Validity
Not Before: Dec 22 15:13:05 2025 GMT
Not After : Dec 29 15:13:05 2025 GMT
Subject: CN=69496002-b315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:ac:0a:7c:7d:10:19:a7:e0:61:e1:2a:4f:
5b:e2:a6:15:24:84:84:c8:c2:8c:49:5b:44:6c:09:
cb:d2:62:c7:68:c7:75:5a:d0:6a:4b:86:4b:42:fb:
a4:85:99:dd:b9:50:8a:18:ab:6f:89:39:49:c1:c8:
28:94:66:d0:ca:ca:16:6c:7e:55:ce:3b:60:89:91:
b0:9f:9d:aa:6f:b9:a2:71:3e:ff:70:bf:06:10:b2:
c4:e2:53:52:a6:8d:36:7b:ea:c0:78:ef:1b:d3:d2:
8f:ff:85:bc:a0:b1:35:04:c9:ac:5e:21:27:12:f7:
19:69:df:da:76:5b:79:36:41:7c:1d:c6:a5:8c:2b:
90:9a:18:e5:55:7e:44:26:6f:dd:27:94:b7:30:46:
a8:09:11:aa:20:ad:6c:dc:41:ce:52:15:c4:93:72:
79:54:f7:bb:cc:44:17:eb:65:66:74:54:da:8a:8d:
5c:d5:4d:aa:47:9a:73:79:42:f0:3b:5b:c9:14:8d:
9b:37:65:a8:87:71:dd:30:9b:b3:5e:96:b7:80:21:
b3:fb:d5:72:c7:c9:d5:47:a7:9e:71:87:22:ec:83:
72:9b:07:4f:e8:0b:2a:d6:c8:ac:7d:86:df:01:0e:
c0:50:99:5c:94:36:2d:d7:f5:69:11:5b:a2:59:90:
b6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5C:41:41:7C:60:C1:53:05:00:C0:A2:A0:59:4A:F4:AF:6A:61:F3
X509v3 Authority Key Identifier:
keyid:4B:2A:86:65:95:45:F9:25:66:35:42:47:A4:F0:8F:3C:E5:BE:6C:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:2b:97:72:d2:08:28:b0:07:c3:9f:93:91:ec:80:a7:bf:b7:
57:7d:4b:34:5f:c7:bb:79:2b:6b:13:4f:fb:e3:a4:02:d7:95:
69:03:4b:54:fc:92:f7:61:ca:88:17:7d:9e:71:18:3a:b6:cb:
66:8c:17:df:da:7f:13:1b:13:0e:3f:a0:b7:6a:14:66:0c:9a:
0e:30:c1:88:3e:31:61:a9:b5:00:56:ec:5b:51:83:4b:14:bc:
45:b9:5e:f0:db:5b:32:5f:e6:0f:29:6d:60:db:d5:84:36:4e:
8e:37:f1:b5:3f:c5:37:64:f0:cc:0c:92:7f:5d:3e:4b:19:91:
78:cc:30:2d:ea:87:37:13:4a:6d:6b:cb:71:15:ea:66:11:33:
fd:ca:fa:62:f6:29:c6:69:ec:80:ed:6d:76:1a:6b:1c:93:9b:
8e:25:e7:65:03:bf:3a:54:c6:84:7d:c7:61:66:1a:d1:64:21:
12:c9:8a:e3:ed:43:d4:9a:eb:a4:e8:53:b2:47:86:85:6a:00:
d1:24:51:0c:78:5e:60:82:de:a4:9e:04:88:f7:6d:ef:2e:07:
4b:df:c1:8b:22:6f:d0:fb:21:13:9e:59:35:02:41:bc:9f:be:
e7:16:7e:6a:66:f5:be:9f:18:95:5f:9e:5f:66:87:6b:63:d4:
f5:84:f2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:42 2025 by rpki-client